Manually Grant the 3.5.1 or Later Sensor Full Disk Access

Use this procedure to manually grant Full Disk Access to macOS sensors.

Procedure

1. 
   
   • For macOS versions prior to macOS Ventura:
     1. In System Preferences, open the Security & Privacy pane and scroll down to Full Disk Access. Click the Lock icon to edit the settings.
     2. In the Full Disk Access window, locate com.vmware.carbonblack.cloud.se-agent.extension.systemextension and select its check box.
   • For macOS Ventura:
     1. In System Preferences, open the Security & Privacy pane and scroll down to Full Disk Access.
     2. In the Full Disk Access window, locate com.vmware.carbonblack.cloud.se-agent.extension.systemextension and switch on its toggle to enable it. Enter your macOS username and password and then click Unlock to allow changes.
2. Open a Finder window and go to /Applications/VMware Carbon Black Cloud/.
3. Drag only the following folder items into the Full Disk Access list:
   • LiveQuery bundle
   • repmgr bundle
   • uninstall bundle
   • VMware CBCloud

     

   Important: An Apple-acknowledged bug in the Full Disk Access pane prevents bundles from displaying in the window. It will appear as if the drag was not successful. This is not the case.
4. Verify that Full Disk Access is successfully enabled. It takes approximately one hour for RepCLI to successfully report Full Disk Access changes. To verify the change immediately, restart the endpoint.
5. Open a Terminal window and run one of the following commands (requires admin password):

   cd /Applications/VMware\ Carbon\ Black\ Cloud/repcli.bundle/Contents/MacOS/
   sudo ./repcli status

   or

   sudo /Applications/VMware\ Carbon\ Black\ Cloud/repcli.bundle/Contents/MacOS/repcli status

   RepCLI displays a sensor information report, including Full Disk Access status: